Review for NeurIPS paper: GNNGuard: Defending Graph Neural Networks against Adversarial Attacks